Ma tahay in adapter-ka VPN ee Windows uu noqdo mid gaar ah ama mid guud?
Go'aanso saddex tijaabo in adapter-ka VPN ee Windows uu ku jiro borofaylka gaarka ah: waddo la aaminay, kala-soocid deggan iyo sharciyo aad runtii u baahan tahay.
In adapter-ka VPN ee Windows lagu dhigto Gaar ah waa sax shabag shirkadeed oo qaldan macmiil VPN ganacsi, farqiguna ma aha mid muuqaal ah. Qaybta shabaggu waxay doorataa borofaylka dab-damiska, sidaas darteed hal isbeddel ayaa hal mar ogolaanaya sharciyo dhan. Waxaan arkay script gelitaan oo dhigaya adapter kasta oo aan la aqoonsan Gaar ah, taasoo si aamusan u muujisay wadaagga faylalka shabagga wireless-ka huteelka. Saddex shuruud ayaa go'aaminaya jawaabta, dhammaantoodna waa inay saxan yihiin ka hor intaadan taaban dejinta.
Qaybtu runtii maxay go'aamisaa
Network Location Awareness waxay u dhistaa calaamad shabag kasta oo ku xiran waxa adapter-ku soo sheegi karo: cinwaanka gateway-ga iyo MAC, DNS suffix-ka, haddii kormeeraha domain-ku jawaabo iyo haddii shabaggu gaaro internet-ka. Windows waxay borofayl ku xidhaa calaamadaas, ka dibna dab-damiska wuxuu dabaqaa sharciyada borofaylkaas. Guud waa beddelka marka aqoonsigu guul-darroobo, sidaas darteed shabag shaqaynaya wali waxaa lagu calaamadin karaa shabag aan la aqoonsan.
Adapter TUN ama TAP badanaa wax yar ayuu siiyaa aqoonsiga. Lammaanaha shabaggu inta badan waa hal cinwaan halkii uu ahaan lahaa gateway, DNS waxaa laga yaabaa in lagu riixo shabagga gudihiisa oo keliya, adapter-kana ma laha waddo caadi ah oo u gaar ah. Calaamadda ka soo baxdaa waxay qeexaysaa gelitaanka dab-damiska, ma aha caafimaadka shabagga, taasna waa sababta sharciyada borofaylka gaarka ah ay u joojiyaan is-waafajinta marka VPN-ku xirmo.
Shuruudda koowaad: shabaggu waa waddada la aaminay
Doorashada Gaar ah waxay sheeganeysaa in wax kasta oo laga gaari karo interface-kan uu ugu yaraan la mid yahay LAN-kaaga, sababtoo ah ogaanshaha iyo sharciyada soo-gelitaanku waxay u tixgelin doonaan subnet-kaas mid maxalli ah. Shabag shirkadeed oo galaya subnet la maamulo oo leh servers faylal iyo printers, sheegashadaasi badanaa way socotaa. Adapter-ku waa albaabka shabag ay maamusho hay'addaada, mishiinka dhinaca kalana waxaa la aqbalay isla siyaasaddii aqbashay tanada.
Bixitaanka VPN ganacsi ma gudbo tijaabadan. Macaamiisha kale waxay wadaagaan subnet-ka bixitaanka, calaamadaynta Guudna waxay ogaanshaha shabagga, LLMNR iyo xallinta magacyada NetBIOS dhigtaa qayb ay shisheeyeyaal ka buuxaan. Shabagga kala-qaybsan sidoo kale wuu guul-darroobi karaa: marka adapter-ku qaado hal waddo oo host ah oo loo maro hal application, ma jiro subnet la aaminay oo laga hadlo, isbeddelka qaybtuna waxba kuma siinayo.
Shuruudda labaad: kala-soociddu way ka badbaadaysaa isku-xirka cusub
Gateway cusub ama DNS suffix cusub waxay soo saaraan calaamad cusub, Windowsna waxay go'aan borofayl cusub ka qaataa. Sidaas darteed Set-NetConnectionProfile hal-mar ah wuxuu socdaa ilaa isku-xirka xiga, ma aha weligiis. Hubi borofaylka isku-xir cusub ka dib, ma aha xiriirka koowaad ka dib, sababtoo ah waa markaas dejintu iskeed u soo noqoto.
Waxaa jira saddex siyaabood oo waara looga dhigo. Tan ugu nadiifka ah waa siyaasad: fur secpol.msc, tag Network List Manager Policies oo deji nooca goobta shabagga, oo ay ku jirto siyaasadda shabagga aan la aqoonsan, si borofaylku u hirgeliyo siyaasad ahaan halkii uu ku hirgelin lahaa amarro. Tan labaad waa script xiriir kasta ama hawsha la qorsheeyay oo socodsiisa PowerShell cmdlet-ka marka shabaggu kaco. Tan saddexaad waa khiyaanada waddada ee hore, oo siisa aqoonsiga gateway uu baarto:
route -p add 0.0.0.0 mask 0.0.0.0 10.8.0.1 metric 50 IF 24
Get-NetConnectionProfileKhiyaanada waddadu waa hareer-mar, ma aha kala-soocid. Way jabtaa marka xiriirka metric-ku isbeddelo ama macmiilka VPN uu dib u qoro waddooyinka isku-xirka cusub, waxayna si aamusan u beddeshaa doorashada waddada wax kasta oo ku dhaca waddada caadiga ah ee labaad.
Shuruudda saddexaad: waxaad u baahan tahay sharciyada gaarka ah
Gaar waxaa badanaa ku jira Wadaagga Faylalka iyo Printer-ka, Ogaanshaha Shabagga iyo kooxaha maamulka fog. Haddii hawshu tahay in shabagga laga gaaro SMB share ama printer, taasi waa sababta dhabta ah ee qaybta loo beddelayo. Haddii hawshu tahay gelitaan bax ah oo loo maro hal web application, qaybtu waxba ma tarayso: qor sharciga baxa, hay Guud oo halkaas joog.
| Scenario | Category | Why |
|---|---|---|
| Corporate tunnel to a file server or printer | Private | Private rules carry the sharing you need |
| Commercial VPN for privacy | Public | The exit subnet is shared with strangers |
| Split tunnel with a single host route | Public | No trusted subnet and an unstable signature |
| Site-to-site tunnel to a branch LAN | Private | The far subnet is managed like the local one |
| Lab adapter you control end to end | Private | Discovery helps and nothing else is exposed |
U akhri shaxda sidii bar-tilmaameed, ka dibna hubi sharciyada gaarka ah ee runtii ku hawlgeliya sawirkaaga. Sawir adag ayaa laga yaabaa inuu wadaagga faylalka gabi ahaanba ka saaray borofaylka gaarka ah, markaasna isbeddelka qaybtu waxba ma gaadho ilaa aad sharciga dib ugu celiso. Hubintaasi waxay qaadataa hal amarro oo waxay badbaadisaa galab dheer.
Isbeddelka samee adigoon ballaarin wax kale
U jeedso index-ka interface-ka, ma aha wildcard, oo akhri liiska ka hor iyo ka dib:
Get-NetConnectionProfile
Set-NetConnectionProfile -InterfaceIndex 24 -NetworkCategory Private
Get-NetFirewallProfileBorofaylalka la kaydiyay waxay ku nool yihiin keydka NetworkList ee registry-ga, halkaas oo qiimaha Category kala sooco shabagyada guud, gaarka ah iyo domain-ka. In la tafatirana waa suurtagal oo khaladkuna fudud: waa inaad beddeshaa gelitaanka u dhigma calaamadda hadda ee adapter-ka, ma aha gelitaan hore oo cinwaankii hore ka tagay. Gelitaan duugoobay wuxuu tafatire-ka ugu muuqdaa mid sax ah oo waxba ma sameeyo isku-xir cusub.
Wax kastoo aad sameyso, ha soo saarin script dhigaya adapter kasta oo aan la aqoonsan Gaar ah. Taasi waa nooca hal-khad ah ee furitaanka ogaanshaha shabag wireless aan la aaminin. Haddii aad u baahan tahay wadaag keliya subnet-ka shabagga, hay borofaylka Guud oo ku dar sharciyo soo-gelitaan xaddidan oo loogu talagalay baaxadda cinwaannada fog ee shabagga; sharciga dab-damisku wuu ka cidhiidhsan yahay qaybta.
Hubi wadaagga, ma aha calaamadda
Isbeddelka ka dib, tijaabi kheyraadka laftiisa halkii aad ku kalsoonaan lahayd calaamadda:
Test-NetConnection files.corp.example -Port 445
Resolve-DnsName files.corp.exampleHaddii wadaaggu wali guul-darroobo iyadoo adapter-ku muujinayo Gaar ah, qaybtu mar dambe maaha dhibaatadaada. Xallinta magacyada, waddo maqan ama ogolaanshaha wadaaggu waxay soo saari doonaan isla calaamadaha, isbeddel borofayl oo kalena midkoodna ma hagaajin karo. Mar kale isku xir oo mar kale socodsi Get-NetConnectionProfile si aad u xaqiijiso in dejintu sii socotay, ka dib u daaweyso guul-darrada hadhay sidii dhibaato SMB caadi ah.
Liiska hubinta: xaqiiji in shabaggu yahay waddo la maamulo, borofaylku ka badbaado isku-xir cusub, sharciyada gaarka ah ee loo baahan yahay ay ku jiraan sawirka iyo in wadaaggu xalliyo oo ka jawaabo port 445. Haddii mid ka mid ah saddexda koowaad uu qaldan yahay, uga tag adapter-ka Guud oo ku xalliso dhibaatada gelitaanka sharci xaddidan.